ubuntu-landscape

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The npm install itself is ordinary, but the skill's actual footprint is broader than a direct Ubuntu/Landscape integration: it requires a third-party Membrane CLI and routes authentication and API traffic through Membrane's connection/proxy layer. That creates a meaningful data-flow and trust mismatch with the stated Ubuntu purpose, though there is no clear evidence of overt malware or hidden execution.

Confidence: 88%Severity: 62%
Audit Metadata
Analyzed At
Sep 23, 2026, 02:24 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fubuntu-landscape%2F@e89a9e35d8745aac64d00b8b79d552804dbfc0292c701ed5f3bfbd1bc7a17c81